Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
File: AS136052.roa (raw, json)
Hash identifier: jGhMBnIVtCfNNBa1GGz4VnG6W0Arw+lmc+JBBkpk/20=
Subject key identifier: CD:F9:7E:4B:94:AB:62:2D:9D:18:5D:4F:3A:5E:50:1D:B7:50:DD:F4
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 6F0920F77665AF6D08326839C41B04D267EC12F6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
Signing time: Fri 19 Sep 2025 08:00:00 +0000
ROA not before: Fri 19 Sep 2025 07:55:00 +0000
ROA not after: Fri 18 Sep 2026 08:00:00 +0000
asID: 136052
IP address blocks: 27.112.78.0/23 maxlen: 24
103.23.198.0/23 maxlen: 24
103.31.38.0/23 maxlen: 24
103.49.238.0/23 maxlen: 24
103.52.114.0/23 maxlen: 24
103.63.24.0/23 maxlen: 24
103.67.78.0/23 maxlen: 24
103.76.120.0/23 maxlen: 24
103.123.62.0/23 maxlen: 24
103.139.192.0/23 maxlen: 24
103.171.84.0/24 maxlen: 24
103.171.85.0/24 maxlen: 24
103.172.204.0/23 maxlen: 24
103.174.114.0/23 maxlen: 24
103.176.76.0/24 maxlen: 24
103.176.78.0/23 maxlen: 24
103.179.56.0/23 maxlen: 24
103.179.254.0/23 maxlen: 24
103.181.142.0/23 maxlen: 24
103.183.74.0/23 maxlen: 24
103.191.92.0/23 maxlen: 24
103.193.176.0/23 maxlen: 24
103.193.178.0/23 maxlen: 24
103.217.144.0/23 maxlen: 24
103.217.226.0/23 maxlen: 24
103.226.138.0/23 maxlen: 24
103.242.10.0/23 maxlen: 24
103.250.208.0/23 maxlen: 24
116.193.190.0/23 maxlen: 24
203.145.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 17:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:09:20:f7:76:65:af:6d:08:32:68:39:c4:1b:04:d2:67:ec:12:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 19 07:55:00 2025 GMT
Not After : Sep 18 08:00:00 2026 GMT
Subject: CN=CDF97E4B94AB622D9D185D4F3A5E501DB750DDF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:80:f5:23:a9:2b:0e:88:05:9c:78:fb:f3:
2b:26:fe:72:99:39:55:fb:39:29:2d:5e:af:cc:38:
7c:00:0e:5c:e3:11:b2:73:a5:e2:6f:dd:ff:63:ce:
df:f0:45:4c:54:65:1e:cb:29:7a:38:9f:a3:c0:d7:
89:c3:4e:cd:41:91:30:18:5e:12:0e:43:39:79:c3:
28:9f:b4:f6:95:44:17:72:63:0d:8d:fd:0a:c7:af:
83:e5:41:51:11:b1:9a:a2:1b:80:1f:88:47:59:95:
3a:ca:37:e7:c8:83:f4:e9:02:d6:48:24:aa:64:0e:
4d:df:58:a9:24:1a:d3:61:cc:22:e1:1f:c2:d7:fc:
00:f6:fb:1d:da:a6:4d:18:f8:d0:f7:0d:d7:86:85:
ec:6d:08:a1:42:a7:6f:ed:a0:ac:b4:04:b3:5f:1e:
22:ae:41:8d:b2:bc:c1:ee:ab:7a:88:7a:80:2b:ca:
b2:26:bb:54:49:06:e0:d4:e0:c9:aa:d0:41:6d:14:
23:b4:30:03:83:da:54:68:03:5a:5d:fd:cc:66:5a:
e5:60:ad:69:bc:64:ef:10:4e:72:12:8e:9b:7f:8d:
68:d4:83:98:f1:93:14:ab:21:17:e6:99:18:12:d8:
72:11:46:b5:94:fa:1f:0d:2c:bb:a1:27:85:1c:94:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:7E:4B:94:AB:62:2D:9D:18:5D:4F:3A:5E:50:1D:B7:50:DD:F4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.78.0/23
103.23.198.0/23
103.31.38.0/23
103.49.238.0/23
103.52.114.0/23
103.63.24.0/23
103.67.78.0/23
103.76.120.0/23
103.123.62.0/23
103.139.192.0/23
103.171.84.0/23
103.172.204.0/23
103.174.114.0/23
103.176.76.0/24
103.176.78.0/23
103.179.56.0/23
103.179.254.0/23
103.181.142.0/23
103.183.74.0/23
103.191.92.0/23
103.193.176.0/22
103.217.144.0/23
103.217.226.0/23
103.226.138.0/23
103.242.10.0/23
103.250.208.0/23
116.193.190.0/23
203.145.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:d7:8e:80:59:2c:ab:b6:98:b8:a9:11:02:83:df:d6:d8:c2:
11:2e:5f:da:8d:e4:c4:69:f7:72:ce:72:fe:43:a5:9e:65:bf:
8e:e5:79:09:5d:bd:4b:55:85:3c:6f:d3:61:a5:95:bc:cc:32:
06:b3:67:61:1a:ca:4c:65:a4:f9:19:f7:2d:cb:a9:bb:b3:7a:
c6:ad:06:78:bd:b7:ca:74:0a:7e:65:f5:16:f4:ff:05:78:9e:
fd:fa:42:bf:d2:e1:40:c7:a5:5d:c3:a6:14:48:07:00:9c:f3:
e2:cc:f5:9f:75:29:02:ca:53:b2:e7:c1:ef:b0:62:03:80:d6:
03:7f:24:00:70:c7:00:d4:3b:83:6f:80:ee:a8:8e:9e:d5:c1:
4a:16:45:ba:c9:a0:bb:9e:1d:e6:52:64:bc:7e:2d:61:7b:ad:
fb:f1:69:c8:a5:09:4f:9a:73:9a:45:4d:f2:d6:d9:90:02:7d:
7e:31:d1:d2:31:df:e3:11:ff:f6:86:33:84:7b:10:4b:86:f1:
95:2a:f5:62:0d:fb:c1:74:25:2b:0f:96:26:3b:cb:ca:b5:80:
af:39:86:da:a9:85:bc:ef:e1:a8:64:5a:1e:6f:4f:00:57:99:
5f:01:b2:77:37:fc:1b:de:07:43:42:70:fd:54:58:a9:f0:46:
57:6a:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:38 2025 by rpki-client